CVE-2023-29086

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP Min-SE heade...

CVE-2023-29090

CVE-2023-29090 affects Samsung Exynos Mobile Processor, Automotive Processor and Modem platforms (Exynos Modem 5123, 5300, 980, 1080, 9110, and Exynos Auto T5123). The issue is memory corruption caused by insufficient parameter validation when decoding an SIP Via header. Public references confirm...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Kamailio vulnerabilities (USN-6022-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6022-1 advisory. It was discovered that Kamailio did not properly sanitize SIP messages under certain circumstances. An attacker could use this...

CVE-2023-29091: Out-of-bounds Write

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding an SIP URI...

CVE-2023-29085

CVE-2023-29085 affects Samsung Exynos Modem families (5123, 5300, 980, 1080, 9110, Auto T5123); root cause is a buffer overflow from insufficient parameter validation while decoding an SIP status line, leading to memory corruption. Exploitation details are not provided in the sources; vendor miti...

Samsung Exynos buffer error vulnerability

SAMSUNG Exynos is a SoC, Arm architecture based processor developed and manufactured by Samsung Mobile, a South Korean company SAMSUNG. SAMSUNG Exynos suffers from a buffer error vulnerability that stems from insufficient parameter validation during decoding of the SIP Min-SE header, resulting in...

CVE-2023-29089

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exynos Auto T5123. Memory corruption can occur due to insufficient parameter validation while decoding SIP multipart...

PT-2023-22136 · Samsung · Exynos Modem 5300 +5

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123 Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5300 Exynos Mobile Processor, Automotive Processor and Modem for Exynos 980 Exynos Mobile...

CVE-2023-29088

CVE-2023-29088 affects Samsung Exynos Mobile Processor, Automotive Processor, and Modem lines (e.g., Exynos Modem 5123, 5300, Exynos 980/1080/9110, Exynos Auto T5123). Root cause: memory corruption due to insufficient parameter validation while decoding an SIP Session-Expires header. Public discl...

Mageia: Security Advisory (MGASA-2023-0040)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Out Of Bounds Read

Sofia-SIP is vulnerable to an Out-of-bounds Read. This vulnerability is present in the sipmethodd function of sipparser.c, and it enables an attacker to potentially trigger an application crash by sending a maliciously crafted message containing a malicious SDP Session Description Protocol to...

Denial Of Service (DoS)

sofia-sip is vulnerable to Denial of Service DoS attacks. An attacker is able to send a message with evil sdp to FreeSWITCH, which may cause an application crash with the use of a URL ending with %...

Remote Code Execution (RCE)

sofia-sip is vulnerable to Remote Code Execution RCE. When parsing each line of a sdp message, rest = record + 2 will access the memory behind \0 and cause an out-of-bounds write. An attacker is able to send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such ...

Kamailio < 5.5.0 Buffer Overflow Vulnerability

Kamailio is prone to a buffer overflow vulnerability which may result in a crash of the server. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Out Of Bounds Write

sofia-sip is vulnerable to Out Of Bounds Write. A remote local attacker is able to cause out-of-bound writes due to improper memory management operations, resulting in a denial of service or arbitrary code execution...

CVE-2023-28098

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...

CVE-2023-28097

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large Content-Length value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large amount of shared memo...

CVE-2023-28099

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, if dsisinlist is used with an invalid IP address string NULL is illegal input, OpenSIPS will attempt to print a string from a random address stack garbage, which could lead to a crash. All user...

CVE-2023-28099

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.9 and 3.2.6, if dsisinlist is used with an invalid IP address string NULL is illegal input, OpenSIPS will attempt to print a string from a random address stack garbage, which could lead to a crash. All user...

CVE-2023-28098

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...